Availability of BigFix Compliance Analytics 2.0

HCL BigFix is pleased to announce the release of BigFix Compliance Analytics version 2.0, as part of BigFix 10.

Product: BigFix Compliance

Title: Availability of BigFix Compliance Analytics version 2.0

Published site: SCM Reporting, version 128

New features and updates:

BigFix Compliance Analytics version 2.0 includes the following new features, enhancements and fixes.

  • Vulnerability Reporting​
    • Tracking and reporting of endpoints’ vulnerability posture and historical trend, based on the current endpoint patching status, for each CVE, computer, or computer group, or across the entire deployment…
    • For each CVE existed, showing CVE details and impacted computers or available patches to help prioritize patching actions to improve the vulnerability posture.
    • Support for Windows and RedHat systems
  • Enhanced domain and report navigation
    • Supports three security domains: security configuration, patch, vulnerability, with easy domain switching and consistent report menus.
    • All management configurations accessible via a ‘gear’ at the top of the menu bar.
    • All sub-reports now displayed as tabs, instead of using a drop-down menu
  • HCL branding with updated look and feel
  • Resolved issue with importing measured property results over 4,000 characters
  • Various bug fixes, security fixes, and performance improvements

Actions to take:

To take advantage of the new features and fixes, upgrade BigFix Compliance Analytics to version 2.0.
If you are upgrading from version 1.9, or are upgrading from version 1.10 but did not enable Patch Reporting, the new Vulnerability Reporting feature is disabled by default. Vulnerability Reporting can be enabled from the Management (Gear icon) -> Domain Settings page.

For first time installation:

In the License Overview Dashboard in the BigFix console (Bigfix Management domain), enable the SCM Reporting site.
In the Security Configuration domain in the console, open the Configuration Management navigation tree.
Select the Fixlet named BigFix Compliance Server 2.0 - First-time Install Fixlet under the BigFix Compliance Install/Upgrade menu tree node.
Follow the Fixlet instructions and take the associated action to install your BigFix Compliance deployment.

For upgrade installation: Refer to the prescribed upgrade steps for the BigFix Compliance version that you are using.

IMPORTANT: Before you start any upgrade process, perform a server and database backup.

A. For BigFix Compliance Analytics versions 1.9.x and 1.10.x:

  1. Make sure that you completed the server and database backup.
  2. In the Security Configuration domain in the console, open the Configuration Management navigation tree.
  3. Under the BigFix Compliance Install/Upgrade menu tree item, select the BigFix Compliance Server 2.0 - Upgrade Fixlet which automatically installs and upgrades to the new version.
  4. Follow the Fixlet instructions and take the associated action to upgrade your BigFix Compliance deployment.
  5. Update the data schema. To do this, log in to the BigFix Compliance web interface from the host server and proceed with configuration. Upgrading the data scheme is expected and it will take some time to complete. NOTE: Automatic upgrade installation only affects installations running under the LocalSystem account. Follow the Fixlet instructions to install the update manually if this fix cannot be applied.

B. For BigFix Compliance Analytics versions prior to 1.9:

  1. Manually upgrade to version 1.10.1.48. The 1.10.1.48 installer can be found here.
  2. After manually upgrading to version 1.10.1.48, use the BigFix Compliance Server 2.0 Upgrade Fixlet to upgrade to version 2.0 (See step A).

More information:

BigFix Compliance team

HCL BigFix

1 Like

Has anyone attempted this yet? Currently on 1.10
I ran the fixlet and it failed with no exit code, but all steps in the action show completed. Logs on the Compliance server show Command Succeeded.
I restarted the SCA service and logged in, but never got the schema update and my version is still 1.10.
Any ideas?

Ok even though I selected “Upgrade” it only cached the installer in D:\Program Files\IBM\SCA\bfc_installer. Had to extract the installer and manually run the update.

Edit - Completed. wooo Pretty clouds!